You are viewing a plain text version of this content. The canonical link for it is here.
- svn commit: r87106 - dev/knox - posted by ha...@apache.org on 2026/09/01 08:45:24 UTC, 0 replies.
- svn commit: r87107 - dev/knox - posted by ha...@apache.org on 2026/09/01 08:46:09 UTC, 0 replies.
- svn commit: r87109 - dev/knox/knox-3.0.0 - posted by ha...@apache.org on 2026/09/01 09:46:04 UTC, 0 replies.
- (knox) branch master updated: KNOX-3429: Harden source assembly to exclude build caches, runtime state, and staging dirs (#1368) - posted by sm...@apache.org on 2026/09/01 11:57:14 UTC, 0 replies.
- (knox) branch master updated: KNOX-3422: Update service_ldap_server.md (#1371) - posted by ha...@apache.org on 2026/09/02 06:24:42 UTC, 0 replies.
- (knox) branch v3.0.0 updated: KNOX-3422: Update service_ldap_server.md (#1371) - posted by ha...@apache.org on 2026/09/02 06:25:43 UTC, 0 replies.
- (knox) branch v3.0.0 updated: Bump org.mariadb.jdbc:mariadb-java-client from 3.3.0 to 3.3.5 (#1363) - posted by ha...@apache.org on 2026/09/02 06:26:48 UTC, 0 replies.
- (knox) tag v3.0.0-RC2 deleted (was 8ceb31275) - posted by ha...@apache.org on 2026/09/02 06:39:33 UTC, 0 replies.
- (knox) branch v3.0.0 updated: KNOX-3427: Bump Netty to 1.137.Final due to CVEs (#1366) - posted by ha...@apache.org on 2026/09/02 07:19:36 UTC, 0 replies.
- (knox) branch master updated: KNOX-3430: Deprecate AccessTokenFederationFilter, also added UnsupportedOperatorException (#1370) - posted by ha...@apache.org on 2026/09/02 07:21:17 UTC, 0 replies.
- (knox) branch v3.0.0 updated: KNOX-3430: Deprecate AccessTokenFederationFilter, also added UnsupportedOperatorException (#1370) - posted by ha...@apache.org on 2026/09/02 07:22:15 UTC, 0 replies.
- (knox) branch v3.0.0 updated: Preparing Apache Knox v3.0.0 Release - posted by ha...@apache.org on 2026/09/02 07:24:20 UTC, 0 replies.
- (knox) branch master updated: KNOX-3419: Tests for the recent improvements (#1369) - posted by ha...@apache.org on 2026/09/02 07:39:16 UTC, 0 replies.
- (knox) branch master updated: KNOX-3424: Dynamic audience handling in the KNOXTOKEN service (#1356) - posted by ha...@apache.org on 2026/09/02 07:45:09 UTC, 0 replies.
- (knox) branch dependabot/maven/org.apache.derby-derby-10.17.1.0 deleted (was 6554a027f) - posted by gi...@apache.org on 2026/09/02 07:46:52 UTC, 0 replies.
- (knox) tag v3.0.0-RC2 created (now abbdb527d) - posted by ha...@apache.org on 2026/09/02 07:50:09 UTC, 0 replies.
- svn commit: r87131 - dev/knox/knox-3.0.0 - posted by ha...@apache.org on 2026/09/02 07:51:52 UTC, 0 replies.
- svn commit: r87132 - dev/knox/knox-3.0.0 - posted by ha...@apache.org on 2026/09/02 07:52:27 UTC, 0 replies.
- (knox) branch master updated: KNOX-3431: UserSearchInterceptor throws exceptions on failed search (#1372) - posted by sm...@apache.org on 2026/09/02 15:23:48 UTC, 0 replies.
- (knox) branch master updated: KNOX-3426 - Add DelegationPolicyService schema, interface, and JDBC implementation (#1361) - posted by sm...@apache.org on 2026/09/03 06:38:58 UTC, 0 replies.
- (knox) branch master updated: KNOX-3426: Embedded-Derby delegation policy service (#1374) - posted by sm...@apache.org on 2026/09/03 13:43:02 UTC, 0 replies.
- (knox) branch master updated: KNOX-3433: set issued_token_type in KnoxIDF token responses (RFC 8693 §2.2.1) (#1375) - posted by sm...@apache.org on 2026/09/03 15:53:44 UTC, 0 replies.
- (knox) branch master updated: KNOX-3424: Complete RFC 8707/8693 dynamic resource/audience handling in KNOXTOKEN and token exchange (#1373) - posted by sm...@apache.org on 2026/09/03 16:06:58 UTC, 0 replies.
- (knox) branch master updated: KNOX-3434 - Allow missing typ when validating JWTs from TrustedOidcIssuers for token exchange. (#1377) - posted by lm...@apache.org on 2026/09/04 15:51:03 UTC, 0 replies.
- (knox) branch master updated: KNOX-3438: Add delegation policy admin API with upsert support for RFC 8693 token exchange (#1379) - posted by sm...@apache.org on 2026/09/07 08:39:12 UTC, 0 replies.
- (knox) branch master updated: KNOX-3439: Add tests for NoClassNameMultiLineToStringStyle (#1378) - posted by ha...@apache.org on 2026/09/07 18:42:51 UTC, 0 replies.
- (knox) branch master updated: KNOX-3432: Advertise RFC 8693 token-exchange and client_credentials grant types in KnoxIDF discovery metadata (#1376) - posted by sm...@apache.org on 2026/09/07 20:36:59 UTC, 0 replies.
- (knox) branch master updated: KNOX-3401: Replace Derby with H2 (#1380) - posted by sm...@apache.org on 2026/09/08 07:21:08 UTC, 0 replies.
- (knox) branch master updated: KNOX-3440: Remove HSQLDB completely from Knox (#1382) - posted by sm...@apache.org on 2026/09/08 09:32:15 UTC, 0 replies.
- (knox) branch master updated: KNOX-3438: Address review comments from delegation policy admin API (#1381) - posted by sm...@apache.org on 2026/09/08 09:32:43 UTC, 0 replies.
- svn commit: r87374 - dev/knox/knox-3.0.0 release/knox/3.0.0 - posted by ha...@apache.org on 2026/09/09 06:53:39 UTC, 0 replies.
- (knox) branch master updated: KNOX-3442: Reject INIT/RUNSCRIPT/ALIAS in H2 database name to prevent JDBC-URL code execution (#1383) - posted by sm...@apache.org on 2026/09/09 07:30:37 UTC, 0 replies.
- (knox) branch v2.1.1 updated: KNOX-3421 - Escape LDAP DN values in KnoxLdapRealm (#1384) - posted by sm...@apache.org on 2026/09/09 07:38:35 UTC, 0 replies.
- (knox) annotated tag v3.0.0-release updated (abbdb527d -> 6c585fd19) - posted by ha...@apache.org on 2026/09/09 15:06:57 UTC, 0 replies.
- (knox) branch v2.1.1 updated: Preparing Apache Knox v2.1.1 Release - posted by ha...@apache.org on 2026/09/10 06:38:50 UTC, 0 replies.
- (knox) branch v2.1.1 updated (fa36e86f1 -> d67ca8b30) - posted by ha...@apache.org on 2026/09/10 06:41:39 UTC, 0 replies.
- (knox) 01/01: Preparing Apache Knox v2.1.1 Release - posted by ha...@apache.org on 2026/09/10 06:41:40 UTC, 0 replies.
- (knox) tag v2.1.1-RC2 created (now d67ca8b30) - posted by ha...@apache.org on 2026/09/10 06:42:32 UTC, 0 replies.
- svn commit: r87407 - dev/knox/knox-2.1.1 - posted by ha...@apache.org on 2026/09/10 08:15:39 UTC, 0 replies.
- svn commit: r87408 - dev/knox/knox-2.1.1 - posted by ha...@apache.org on 2026/09/10 08:17:03 UTC, 0 replies.
- (knox) branch master updated: KNOX-3447: Harden ServiceDefinitonUnmarshaller (#1387) - posted by pz...@apache.org on 2026/09/10 13:03:56 UTC, 0 replies.
- (knox) branch master updated: KNOX-3450: Add Transfer-Encoding to set of excluded headers in PassAllHeadersDispatch (#1389) - posted by pz...@apache.org on 2026/09/10 18:31:37 UTC, 0 replies.
- (knox) branch master updated: KNOX-3444: Optimize CM discovery memory usage by only caching role configurations that ServiceModelGenerators actually use (#1392) - posted by bo...@apache.org on 2026/09/11 11:49:43 UTC, 0 replies.
- (knox) branch master updated: KNOX-3410: Add unit tests for XForwardedHeaderRequestWrapper (#1391) - posted by ha...@apache.org on 2026/09/14 07:04:01 UTC, 0 replies.
- (knox) branch master updated: KNOX-3446: Change version to 3.1.0, Update NOTICE and CHANGES (#1386) - posted by ha...@apache.org on 2026/09/14 07:12:58 UTC, 0 replies.
- (knox) branch master updated: KNOX-3445: KnoxIDF admin service stays disabled (Empty stub) when KNOXIDF_ADMIN topology is hot-deployed after gateway startup (#1394) - posted by ha...@apache.org on 2026/09/14 07:38:31 UTC, 0 replies.
- (knox) branch master updated: KNOX-3449: Prove Knox accepts Kubernetes ServiceAccount tokens on the RFC 8693 token-exchange path (#1396) - posted by sm...@apache.org on 2026/09/14 10:53:29 UTC, 0 replies.
- (knox) branch master updated: KNOX-3453: Ignore runtime-generated gateway-server/data/security directory in git (#1397) - posted by sm...@apache.org on 2026/09/14 11:46:28 UTC, 0 replies.
- (knox) branch master updated: KNOX-3441: add delegated token exchange (actor-token and headless) with policy enforcement and audit (#1398) - posted by sm...@apache.org on 2026/09/15 12:07:22 UTC, 0 replies.
- (knox) branch master updated: KNOX-3457: Remove unused delegation.requested.scope.enabled provider parameter (#1399) - posted by sm...@apache.org on 2026/09/15 16:15:54 UTC, 0 replies.
- (knox) branch master updated: KNOX-3456: resolve canActFor.groups via KnoxLDAPService group lookup, failing with server_error when LDAP is unavailable (#1402) - posted by sm...@apache.org on 2026/09/16 07:07:42 UTC, 0 replies.
- (knox) branch gh-pages updated: Deployed abbdb527d with MkDocs version: 1.6.1 - posted by ha...@apache.org on 2026/09/16 07:11:42 UTC, 0 replies.
- (knox) branch master updated: KNOX-3462: Fix github docs links (#1403) - posted by ha...@apache.org on 2026/09/16 07:48:37 UTC, 0 replies.
- (knox) branch master updated: KNOX-3459: honor delegation policy tokenTtlSec as the minted token's expiry basis (#1401) - posted by sm...@apache.org on 2026/09/16 08:00:58 UTC, 0 replies.
- (knox) branch master updated: KNOX-3458: enforce a configurable maximum actor-chain depth in token exchange (#1400) - posted by sm...@apache.org on 2026/09/16 09:43:03 UTC, 0 replies.
- (knox) branch master updated: Backport v3.0.0 docs changes to master and changing version to 3.1.0 (#1404) - posted by ha...@apache.org on 2026/09/16 11:17:32 UTC, 0 replies.
- (knox) branch master updated: KNOX-3238: Migrate from javax.servlet to jakarta.servlet servlet-api (#1388) - posted by sm...@apache.org on 2026/09/16 12:40:27 UTC, 0 replies.
- (knox) branch master updated: KNOX-3465: add CI integration tests for RFC 8693 token exchange (same-subject and delegation gating) (#1406) - posted by sm...@apache.org on 2026/09/16 13:17:09 UTC, 0 replies.
- (knox) branch master updated: KNOX-3461: authorize same-subject requested audience against the subject token's aud via delegation.same.subject.requested.audience.enabled (#1405) - posted by sm...@apache.org on 2026/09/17 08:45:26 UTC, 0 replies.
- (knox) branch master updated: KNOX-3466: add CI integration tests for RFC 8693 same-subject requested-audience authorization (#1407) - posted by sm...@apache.org on 2026/09/17 09:47:22 UTC, 0 replies.
- (knox) branch master updated: KNOX-3471: KnoxIDF expires_in should return relative second instead o… (#1408) - posted by ha...@apache.org on 2026/09/17 12:36:31 UTC, 0 replies.
- (knox) branch master updated: KNOX-3464: document KnoxIDF RFC 8693 token exchange & delegation; fix KnoxIDF config reference (#1410) - posted by sm...@apache.org on 2026/09/18 07:03:57 UTC, 0 replies.
- (knox) branch master updated: KNOX-3460: audit all RFC 8693 token-exchange paths pre-mint and add a mint-time TOKEN_EXCHANGE audit emitting jti/expiry/issued_subject (#1409) - posted by sm...@apache.org on 2026/09/18 08:57:25 UTC, 0 replies.
- (knox) branch master updated: KNOX-3475: enforce delegation policy status at authorization time so a revoked (not deleted) policy no longer authorizes token exchange (#1414) - posted by sm...@apache.org on 2026/09/18 13:50:51 UTC, 0 replies.
- (knox) branch master updated: KNOX-3470 - Add support for /.well-known/oauth-authorization-server (#1417) - posted by mo...@apache.org on 2026/09/18 21:13:02 UTC, 0 replies.
- (knox) branch dependabot/maven/org.bouncycastle-bcprov-jdk18on-1.85 created (now ae7a82afb) - posted by gi...@apache.org on 2026/09/19 04:27:44 UTC, 0 replies.
- (knox) branch master updated: KNOX-3476: add RFC 8693 delegation-path integration tests (policy lookup, act/aud minting, TTL cap, headless) (#1416) - posted by sm...@apache.org on 2026/09/19 06:51:07 UTC, 0 replies.
- (knox) tag v2.1.1-RC3 created (now 06f19c3ae) - posted by ha...@apache.org on 2026/09/19 10:00:02 UTC, 1 replies.
- (knox) tag v2.1.1-RC3 deleted (was 06f19c3ae) - posted by ha...@apache.org on 2026/09/19 10:01:00 UTC, 1 replies.
- (knox) tag v2.1.1-RC3 created (now d67ca8b30) - posted by ha...@apache.org on 2026/09/19 10:42:04 UTC, 0 replies.
- (knox) branch master updated: KNOX-3472: Add livy_for_spark3 Knox service definition (#1411) - posted by sm...@apache.org on 2026/09/21 06:38:57 UTC, 0 replies.
- svn commit: r87726 - dev/knox/knox-2.1.1 - posted by ha...@apache.org on 2026/09/21 06:56:00 UTC, 0 replies.
- svn commit: r87727 - dev/knox/knox-2.1.1 - posted by ha...@apache.org on 2026/09/21 06:56:40 UTC, 0 replies.
- (knox) branch master updated: KNOX-3477: Capture the RFC 8693 delegation actor-chain in gateway-audit.log (#1419) - posted by ha...@apache.org on 2026/09/21 11:39:57 UTC, 0 replies.
- (knox) branch master updated: KNOX-3473: Add livy_for_spark4 Knox service definition (#1412) - posted by sm...@apache.org on 2026/09/21 12:15:29 UTC, 0 replies.
- (knox) branch master updated: KNOX-3474: Add spark4historyui Knox service definition (#1413) - posted by sm...@apache.org on 2026/09/21 12:17:37 UTC, 0 replies.
- svn commit: r87772 - dev/knox/knox-2.1.1 - posted by ha...@apache.org on 2026/09/22 06:30:54 UTC, 0 replies.
- svn commit: r87773 - dev/knox/knox-2.1.1 - posted by ha...@apache.org on 2026/09/22 06:34:25 UTC, 0 replies.
- (knox) branch master updated: KNOX-3452: Add comprehensive unit tests for MimeTypes (#1393) - posted by ha...@apache.org on 2026/09/23 07:26:07 UTC, 0 replies.
- (knox) branch master updated: KNOX-3480: Support user-supplied clientId in the Client Credentials endpoint (#1422) - posted by sm...@apache.org on 2026/09/23 16:02:52 UTC, 0 replies.
- (knox) branch dependabot/maven/org.jline-jline-builtins-3.30.15 created (now e88e5c8ae) - posted by gi...@apache.org on 2026/09/23 18:35:33 UTC, 0 replies.
- (knox) branch dependabot/maven/org.jline-jline-reader-3.30.15 created (now 4be5c7420) - posted by gi...@apache.org on 2026/09/23 18:35:38 UTC, 0 replies.
- (knox) branch master updated: KNOX-3478 - Add support to forward auth tokens in KNOX-AUTH-SERVICE (#1425) - posted by mo...@apache.org on 2026/09/24 13:21:27 UTC, 0 replies.
- (knox) branch master updated (7489115c4 -> 7d4e4facc) - posted by sm...@apache.org on 2026/09/25 18:33:07 UTC, 0 replies.
- (knox) branch master updated: KNOX-3490: Key LDAP roles lookup on the uid attribute, augmenting the backend search with it when the client omits it (#1431) - posted by sm...@apache.org on 2026/09/28 14:48:18 UTC, 0 replies.
- svn commit: r88070 - dev/knox/knox-2.1.1 release/knox/2.1.1 - posted by ha...@apache.org on 2026/09/29 06:34:29 UTC, 0 replies.
- (knox) annotated tag v2.1.1-release updated (d67ca8b30 -> fb0ab2198) - posted by ha...@apache.org on 2026/09/29 06:38:32 UTC, 0 replies.
- (knox) branch master updated: KNOX-3492: Update CHANGES with 2.1.1 release (#1433) - posted by ha...@apache.org on 2026/09/29 08:30:08 UTC, 0 replies.
- (knox) branch master updated: KNOX-3493: Add k8s SA policy-enforced actor-token and headless requested_subject delegation E2E tests (#1434) - posted by sm...@apache.org on 2026/09/29 18:02:12 UTC, 0 replies.
- (knox) branch master updated: KNOX-3491 - Add pluggable request audience validation, with a Kubernetes destination validator (#1432) - posted by sm...@apache.org on 2026/09/29 18:52:11 UTC, 0 replies.
- (knox) branch master updated: KNOX-3485: Roles lookup replaces group entries with role entries (#1428) - posted by sm...@apache.org on 2026/09/30 06:58:41 UTC, 0 replies.
- (knox) branch master updated: KNOX-3496: LDAP Proxy requests memberOf attribute from backend (#1435) - posted by sm...@apache.org on 2026/09/30 09:04:04 UTC, 0 replies.
- (knox) branch master updated: KNOX-3497: Resolve credential-store aliases in LDAP proxy backend password properties (#1436) - posted by sm...@apache.org on 2026/09/30 09:32:34 UTC, 0 replies.